Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/FA14F3A6EA2A11EFA72B2EA1762E951A.roa
File: FA14F3A6EA2A11EFA72B2EA1762E951A.roa (raw, json)
Hash identifier: U43ZUl0Lj+boZr+fTvuIBX6sOLIWpsqU63fbNFdTG3I=
Subject key identifier: F7:E0:D3:62:24:53:71:E6:AB:A9:A8:F4:37:93:50:AA:15:70:23:AC
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 44
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/FA14F3A6EA2A11EFA72B2EA1762E951A.roa
Signing time: Thu 13 Feb 2025 16:52:58 +0000
ROA not before: Thu 13 Feb 2025 16:52:53 +0000
ROA not after: Sun 31 Dec 2028 16:52:53 +0000
asID: 30985
IP address blocks: 102.217.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 13 16:52:53 2025 GMT
Not After : Dec 31 16:52:53 2028 GMT
Subject: CN=67ae236a-3c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:01:67:b3:75:66:a0:a9:c7:14:2d:26:f5:
0a:7b:02:81:a5:bb:67:0f:0b:37:8e:3d:61:34:6d:
93:d1:0a:3a:1c:85:c4:bc:40:cb:44:be:ec:ce:66:
2f:04:f4:a6:fc:6b:3d:2d:e0:51:7c:bb:5b:f0:3f:
9c:05:36:6c:f8:9f:c6:c8:5f:d1:78:95:8a:be:1d:
98:2c:6e:82:15:f3:ae:d9:e7:29:87:bf:ec:3f:6f:
db:7e:f9:c8:e7:61:d5:b7:77:eb:51:e5:1b:e2:6c:
dd:9f:b0:e7:1e:e5:c5:1d:15:18:ae:94:12:68:f2:
98:e5:a7:20:bc:7b:1a:a1:40:44:fc:a7:80:16:8b:
f4:ef:f9:93:bb:d7:2e:20:4b:78:6a:6c:89:3f:bb:
4c:b3:b4:70:98:50:45:dc:3c:88:1b:d7:26:c6:84:
df:ff:db:3b:06:58:a4:21:72:36:d2:fd:7f:d7:a3:
a7:d5:24:d6:ac:7d:89:ea:46:54:76:e5:1f:c0:81:
ef:bd:84:dd:84:6b:38:f7:f1:d7:a7:f4:8d:2d:20:
cc:aa:fb:a4:92:eb:d7:6d:34:30:76:cb:8a:02:bc:
68:8a:cc:f2:e2:61:4f:7c:51:90:a2:b5:5c:5c:f6:
48:95:52:b1:a3:64:36:49:5a:10:5c:ef:99:49:27:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:D3:62:24:53:71:E6:AB:A9:A8:F4:37:93:50:AA:15:70:23:AC
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/FA14F3A6EA2A11EFA72B2EA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ef:79:99:6d:2a:55:ed:a7:d9:7c:d6:2a:d2:b0:74:81:8a:
59:f6:91:f4:e7:55:42:6c:a5:c3:7d:1e:2d:2d:aa:26:0f:8a:
2c:7e:92:38:33:9d:8b:a2:e8:fb:84:15:a4:e5:ab:d8:b1:1c:
70:e0:f8:40:e8:e3:e5:a1:43:47:7f:ad:db:f4:29:e2:40:7d:
c2:b7:61:2f:e2:57:bd:28:d3:36:0d:17:75:72:17:58:32:d9:
b0:00:cd:10:a9:5f:2c:68:a7:63:9f:12:6a:02:78:4f:d1:0e:
93:2e:76:58:2a:77:e9:54:da:4d:ec:46:79:1c:a2:ab:31:de:
2c:ff:91:07:51:94:f3:12:03:bd:28:68:d0:a9:8c:cb:7b:0f:
68:c7:69:92:07:7e:1d:70:4e:e3:86:10:3b:9e:e4:f5:65:46:
68:14:e0:e6:d0:8e:0a:2a:b0:70:42:94:ee:96:5c:6e:14:bf:
7f:54:d0:24:78:80:32:3e:f2:13:ce:c8:43:b4:77:c5:73:e2:
bf:4a:af:ba:cd:d6:ee:22:2b:b0:dc:c8:47:c6:3f:40:14:cf:
a0:88:21:f2:54:c2:a3:2a:1a:57:2e:95:96:83:ab:3b:0a:9b:
43:57:5f:46:b3:12:35:94:67:c8:43:dd:bf:42:12:5d:c7:6e:
03:17:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:09:57 2025 by rpki-client